Backdoors and Trojan Horses

• Vendor backdoors (continues to plague the community)
• Replace system program with backdoor program
  • Unix login, telnet or ftp (rootkit)
  • Windows NT login (msgina.dll)
• Use similar technique with other system programs
• Backdoor and Trojan horses will have the same behavior as the program they are replacing and are difficult to find